1*cdf0e10cSrcweir /************************************************************************* 2*cdf0e10cSrcweir * 3*cdf0e10cSrcweir * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. 4*cdf0e10cSrcweir * 5*cdf0e10cSrcweir * Copyright 2000, 2010 Oracle and/or its affiliates. 6*cdf0e10cSrcweir * 7*cdf0e10cSrcweir * OpenOffice.org - a multi-platform office productivity suite 8*cdf0e10cSrcweir * 9*cdf0e10cSrcweir * This file is part of OpenOffice.org. 10*cdf0e10cSrcweir * 11*cdf0e10cSrcweir * OpenOffice.org is free software: you can redistribute it and/or modify 12*cdf0e10cSrcweir * it under the terms of the GNU Lesser General Public License version 3 13*cdf0e10cSrcweir * only, as published by the Free Software Foundation. 14*cdf0e10cSrcweir * 15*cdf0e10cSrcweir * OpenOffice.org is distributed in the hope that it will be useful, 16*cdf0e10cSrcweir * but WITHOUT ANY WARRANTY; without even the implied warranty of 17*cdf0e10cSrcweir * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 18*cdf0e10cSrcweir * GNU Lesser General Public License version 3 for more details 19*cdf0e10cSrcweir * (a copy is included in the LICENSE file that accompanied this code). 20*cdf0e10cSrcweir * 21*cdf0e10cSrcweir * You should have received a copy of the GNU Lesser General Public License 22*cdf0e10cSrcweir * version 3 along with OpenOffice.org. If not, see 23*cdf0e10cSrcweir * <http://www.openoffice.org/license.html> 24*cdf0e10cSrcweir * for a copy of the LGPLv3 License. 25*cdf0e10cSrcweir * 26*cdf0e10cSrcweir ************************************************************************/ 27*cdf0e10cSrcweir 28*cdf0e10cSrcweir // MARKER(update_precomp.py): autogen include statement, do not remove 29*cdf0e10cSrcweir #include "precompiled_svl.hxx" 30*cdf0e10cSrcweir 31*cdf0e10cSrcweir #include <svl/PasswordHelper.hxx> 32*cdf0e10cSrcweir #include <rtl/digest.h> 33*cdf0e10cSrcweir #include <tools/string.hxx> 34*cdf0e10cSrcweir 35*cdf0e10cSrcweir using namespace com::sun::star; 36*cdf0e10cSrcweir 37*cdf0e10cSrcweir void SvPasswordHelper::GetHashPassword(uno::Sequence<sal_Int8>& rPassHash, const sal_Char* pPass, sal_uInt32 nLen) 38*cdf0e10cSrcweir { 39*cdf0e10cSrcweir rPassHash.realloc(RTL_DIGEST_LENGTH_SHA1); 40*cdf0e10cSrcweir 41*cdf0e10cSrcweir rtlDigestError aError = rtl_digest_SHA1 (pPass, nLen, reinterpret_cast<sal_uInt8*>(rPassHash.getArray()), rPassHash.getLength()); 42*cdf0e10cSrcweir if (aError != rtl_Digest_E_None) 43*cdf0e10cSrcweir { 44*cdf0e10cSrcweir rPassHash.realloc(0); 45*cdf0e10cSrcweir } 46*cdf0e10cSrcweir } 47*cdf0e10cSrcweir 48*cdf0e10cSrcweir void SvPasswordHelper::GetHashPasswordLittleEndian(uno::Sequence<sal_Int8>& rPassHash, const String& sPass) 49*cdf0e10cSrcweir { 50*cdf0e10cSrcweir xub_StrLen nSize(sPass.Len()); 51*cdf0e10cSrcweir sal_Char* pCharBuffer = new sal_Char[nSize * sizeof(sal_Unicode)]; 52*cdf0e10cSrcweir 53*cdf0e10cSrcweir for (xub_StrLen i = 0; i < nSize; ++i) 54*cdf0e10cSrcweir { 55*cdf0e10cSrcweir sal_Unicode ch(sPass.GetChar(i)); 56*cdf0e10cSrcweir pCharBuffer[2 * i] = static_cast< sal_Char >(ch & 0xFF); 57*cdf0e10cSrcweir pCharBuffer[2 * i + 1] = static_cast< sal_Char >(ch >> 8); 58*cdf0e10cSrcweir } 59*cdf0e10cSrcweir 60*cdf0e10cSrcweir GetHashPassword(rPassHash, pCharBuffer, nSize * sizeof(sal_Unicode)); 61*cdf0e10cSrcweir 62*cdf0e10cSrcweir delete[] pCharBuffer; 63*cdf0e10cSrcweir } 64*cdf0e10cSrcweir 65*cdf0e10cSrcweir void SvPasswordHelper::GetHashPasswordBigEndian(uno::Sequence<sal_Int8>& rPassHash, const String& sPass) 66*cdf0e10cSrcweir { 67*cdf0e10cSrcweir xub_StrLen nSize(sPass.Len()); 68*cdf0e10cSrcweir sal_Char* pCharBuffer = new sal_Char[nSize * sizeof(sal_Unicode)]; 69*cdf0e10cSrcweir 70*cdf0e10cSrcweir for (xub_StrLen i = 0; i < nSize; ++i) 71*cdf0e10cSrcweir { 72*cdf0e10cSrcweir sal_Unicode ch(sPass.GetChar(i)); 73*cdf0e10cSrcweir pCharBuffer[2 * i] = static_cast< sal_Char >(ch >> 8); 74*cdf0e10cSrcweir pCharBuffer[2 * i + 1] = static_cast< sal_Char >(ch & 0xFF); 75*cdf0e10cSrcweir } 76*cdf0e10cSrcweir 77*cdf0e10cSrcweir GetHashPassword(rPassHash, pCharBuffer, nSize * sizeof(sal_Unicode)); 78*cdf0e10cSrcweir 79*cdf0e10cSrcweir delete[] pCharBuffer; 80*cdf0e10cSrcweir } 81*cdf0e10cSrcweir 82*cdf0e10cSrcweir void SvPasswordHelper::GetHashPassword(uno::Sequence<sal_Int8>& rPassHash, const String& sPass) 83*cdf0e10cSrcweir { 84*cdf0e10cSrcweir GetHashPasswordLittleEndian(rPassHash, sPass); 85*cdf0e10cSrcweir } 86*cdf0e10cSrcweir 87*cdf0e10cSrcweir bool SvPasswordHelper::CompareHashPassword(const uno::Sequence<sal_Int8>& rOldPassHash, const String& sNewPass) 88*cdf0e10cSrcweir { 89*cdf0e10cSrcweir bool bResult = false; 90*cdf0e10cSrcweir 91*cdf0e10cSrcweir uno::Sequence<sal_Int8> aNewPass(RTL_DIGEST_LENGTH_SHA1); 92*cdf0e10cSrcweir GetHashPasswordLittleEndian(aNewPass, sNewPass); 93*cdf0e10cSrcweir if (aNewPass == rOldPassHash) 94*cdf0e10cSrcweir bResult = true; 95*cdf0e10cSrcweir else 96*cdf0e10cSrcweir { 97*cdf0e10cSrcweir GetHashPasswordBigEndian(aNewPass, sNewPass); 98*cdf0e10cSrcweir bResult = (aNewPass == rOldPassHash); 99*cdf0e10cSrcweir } 100*cdf0e10cSrcweir 101*cdf0e10cSrcweir return bResult; 102*cdf0e10cSrcweir } 103*cdf0e10cSrcweir 104